Start tomcat as tomcat user

[Urtzi Larrazabal]

Hi friends !

I have installed Tomcat 3.3.1 on a solaris 8 with apache 1.3.23 and mysql. If I start 
Tomcat as root there isn't any problem but when I try to run it as tomcat user there 
are several problems. 
Could anybody tell me  the requierements that this user must have to start tomcat? 
Tomcat is running on 8080.

Regards,

Urtzi.

--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

RE: Start tomcat as tomcat user

[Urtzi Larrazabal]

I have changed some permissions:

chown -R tomcat $TOMCAT_HOME/conf
chown -R tomcat $TOMCAT_HOME/logs
chown -R tomcat $TOMCAT_HOME/work

I can start tomcat without any problem but for example the aplicatins cant't 
access to mysql database.Any idea?


-Original Message-
From: David Cassidy [mailto:[EMAIL PROTECTED]]
Sent: martes 13 de agosto de 2002 11:18
To: Tomcat Users List
Subject: Re: Start tomcat as tomcat user


Can you tell us what the problems are ?

You might find that some of the files belong to root and so
cannot be written to by your tomcat user. You might want to
change the ownership over to your tomcat user.

David

Urtzi Larrazabal wrote:

>Hi friends !
>
>I have installed Tomcat 3.3.1 on a solaris 8 with apache 1.3.23 and mysql. If I start 
>Tomcat as root there isn't any problem but when I try to run it as tomcat user there 
>are several problems. 
>Could anybody tell me  the requierements that this user must have to start tomcat? 
>Tomcat is running on 8080.
>
>Regards,
>
>Urtzi.
>
>--
>To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
>
>  
>




--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Run Tomcat as tomcat user

[Urtzi Larrazabal]

Hi !

I am trying to run tomcat as tomcat user. When I start it, it seems to start without 
any problem. I execute some jsp and it works fine but when I execute a page tha 
require to connect to mysql database it cant't connect to the database and an empty 
log named something like DCB_1029483253596.log is generated. Running tomcat as root I 
haven't any problem.

¿any idea?

Regards,

Urtzi.


--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

RE: Run Tomcat as tomcat user

[Urtzi Larrazabal]

Hi Andy !

Thanks for your response.

I have created a user named tomcat in mysql and I have granted acccess but...I haven't 
created any password for this user, is necesary a password??

Urtzi

-Original Message-
From: Andy Eastham [mailto:[EMAIL PROTECTED]]
Sent: viernes 16 de agosto de 2002 12:25
To: Tomcat Users List
Subject: RE: Run Tomcat as tomcat user


Urtzi,

You need to grant access to the tomcat user.  See the section in the GRANT
command in the mysql manual (available online at the www.mysql.com site).
By default, root can connect without a password, but other users need to be
granted access.

You'll need to execute something like:
GRANT ALL PRIVILEGES on *.* to nobody@yourhostname identified by
'nobodyspassword';

The password is not the unix password - its mysql specific and set by this
command.

I recommend you read up to make sure you're only grant what you need - after
all there's no point running as nobody if it can do everything root can...

Test it by doing
su - nobody
then check that you can connect with the password you've set.

Andy

> -----Original Message-
> From: Urtzi Larrazabal [mailto:[EMAIL PROTECTED]]
> Sent: 16 August 2002 11:04
> To: [EMAIL PROTECTED]
> Subject: Run Tomcat as tomcat user
>
>
>
> Hi !
>
> I am trying to run tomcat as tomcat user. When I start it, it
> seems to start without any problem. I execute some jsp and it
> works fine but when I execute a page tha require to connect to
> mysql database it cant't connect to the database and an empty log
> named something like DCB_1029483253596.log is generated. Running
> tomcat as root I haven't any problem.
>
> ¿any idea?
>
> Regards,
>
> Urtzi.
>
>
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
>
>



--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

RE: Run Tomcat as tomcat user

[Urtzi Larrazabal]

¿the unix tomcat user and the mysql tomcat user must have the same password?

-Original Message-
From: Capr1ce [mailto:[EMAIL PROTECTED]]
Sent: viernes 16 de agosto de 2002 12:40
To: Tomcat Users List
Subject: RE: Run Tomcat as tomcat user



A password is not necessary, but certainly recommended.

See these sections of the mysql documentation:
http://www.mysql.com/doc/en/GRANT.html
http://www.mysql.com/doc/en/Adding_users.html


At 12:31 PM 16/08/2002 +0200, you wrote:
>Hi Andy !
>
>Thanks for your response.
>
>I have created a user named tomcat in mysql and I have granted acccess 
>but...I haven't created any password for this user, is necesary a password??
>
>Urtzi
>
>-Original Message-
>From: Andy Eastham [mailto:[EMAIL PROTECTED]]
>Sent: viernes 16 de agosto de 2002 12:25
>To: Tomcat Users List
>Subject: RE: Run Tomcat as tomcat user
>
>
>Urtzi,
>
>You need to grant access to the tomcat user.  See the section in the GRANT
>command in the mysql manual (available online at the www.mysql.com site).
>By default, root can connect without a password, but other users need to be
>granted access.
>
>You'll need to execute something like:
>GRANT ALL PRIVILEGES on *.* to nobody@yourhostname identified by
>'nobodyspassword';
>
>The password is not the unix password - its mysql specific and set by this
>command.
>
>I recommend you read up to make sure you're only grant what you need - after
>all there's no point running as nobody if it can do everything root can...
>
>Test it by doing
>su - nobody
>then check that you can connect with the password you've set.
>
>Andy
>
> > -Original Message-
> > From: Urtzi Larrazabal [mailto:[EMAIL PROTECTED]]
> > Sent: 16 August 2002 11:04
> > To: [EMAIL PROTECTED]
> > Subject: Run Tomcat as tomcat user
> >
> >
> >
> > Hi !
> >
> > I am trying to run tomcat as tomcat user. When I start it, it
> > seems to start without any problem. I execute some jsp and it
> > works fine but when I execute a page tha require to connect to
> > mysql database it cant't connect to the database and an empty log
> > named something like DCB_1029483253596.log is generated. Running
> > tomcat as root I haven't any problem.
> >
> > ¿any idea?
> >
> > Regards,
> >
> > Urtzi.
> >
> >
> > --
> > To unsubscribe, e-mail:
> > <mailto:[EMAIL PROTECTED]>
> > For additional commands, e-mail:
> > <mailto:[EMAIL PROTECTED]>
> >
> >
>
>
>
>--
>To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
>
>--
>To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>



--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

RE: Run Tomcat as tomcat user

[Urtzi Larrazabal]

Let me Understand,

To run tomcat as tomcat user and be able to connect to mysql thought JDBC I need:


On my unix machine have a user named tomcat which runs tomcat.
On mysql have other user named tomcat.
And the connection thought JDBC must be done with the user and password created in 
mysql.

-Original Message-
From: Capr1ce [mailto:[EMAIL PROTECTED]]
Sent: viernes 16 de agosto de 2002 12:57
To: Tomcat Users List
Subject: RE: Run Tomcat as tomcat user



No they don't need to have the same password.
When your JSP/Java code connects to the MySql database using JDBC, you 
should use the mysql user to connect.


At 12:48 PM 16/08/2002 +0200, you wrote:
>¿the unix tomcat user and the mysql tomcat user must have the same password?
>
>-Original Message-
>From: Capr1ce [mailto:[EMAIL PROTECTED]]
>Sent: viernes 16 de agosto de 2002 12:40
>To: Tomcat Users List
>Subject: RE: Run Tomcat as tomcat user
>
>
>
>A password is not necessary, but certainly recommended.
>
>See these sections of the mysql documentation:
>http://www.mysql.com/doc/en/GRANT.html
>http://www.mysql.com/doc/en/Adding_users.html
>
>
>At 12:31 PM 16/08/2002 +0200, you wrote:
> >Hi Andy !
> >
> >Thanks for your response.
> >
> >I have created a user named tomcat in mysql and I have granted acccess
> >but...I haven't created any password for this user, is necesary a password??
> >
> >Urtzi
> >
> >-Original Message-
> >From: Andy Eastham [mailto:[EMAIL PROTECTED]]
> >Sent: viernes 16 de agosto de 2002 12:25
> >To: Tomcat Users List
> >Subject: RE: Run Tomcat as tomcat user
> >
> >
> >Urtzi,
> >
> >You need to grant access to the tomcat user.  See the section in the GRANT
> >command in the mysql manual (available online at the www.mysql.com site).
> >By default, root can connect without a password, but other users need to be
> >granted access.
> >
> >You'll need to execute something like:
> >GRANT ALL PRIVILEGES on *.* to nobody@yourhostname identified by
> >'nobodyspassword';
> >
> >The password is not the unix password - its mysql specific and set by this
> >command.
> >
> >I recommend you read up to make sure you're only grant what you need - after
> >all there's no point running as nobody if it can do everything root can...
> >
> >Test it by doing
> >su - nobody
> >then check that you can connect with the password you've set.
> >
> >Andy
> >
> > > -Original Message-
> > > From: Urtzi Larrazabal [mailto:[EMAIL PROTECTED]]
> > > Sent: 16 August 2002 11:04
> > > To: [EMAIL PROTECTED]
> > > Subject: Run Tomcat as tomcat user
> > >
> > >
> > >
> > > Hi !
> > >
> > > I am trying to run tomcat as tomcat user. When I start it, it
> > > seems to start without any problem. I execute some jsp and it
> > > works fine but when I execute a page tha require to connect to
> > > mysql database it cant't connect to the database and an empty log
> > > named something like DCB_1029483253596.log is generated. Running
> > > tomcat as root I haven't any problem.
> > >
> > > ¿any idea?
> > >
> > > Regards,
> > >
> > > Urtzi.
> > >
> > >
> > > --
> > > To unsubscribe, e-mail:
> > > <mailto:[EMAIL PROTECTED]>
> > > For additional commands, e-mail:
> > > <mailto:[EMAIL PROTECTED]>
> > >
> > >
> >
> >
> >
> >--
> >To unsubscribe, 
> e-mail:   <mailto:[EMAIL PROTECTED]>
> >For additional commands, e-mail: 
> <mailto:[EMAIL PROTECTED]>
> >
> >--
> >To unsubscribe, 
> e-mail:   <mailto:[EMAIL PROTECTED]>
> >For additional commands, e-mail: 
> <mailto:[EMAIL PROTECTED]>
>
>
>
>--
>To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
>
>--
>To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>



--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

RE: Run Tomcat as tomcat user

[Urtzi Larrazabal]

My situation is:
-Tomcat running as tomcat user.
-JDBC connection thought a mysql user with a especific privileges in a 
database.

then why ?

If I run tomcat as root the connection to mysql can be done.

If I run tomact as tomcat user the connection to mysql can't be done.



-Original Message-
From: Capr1ce [mailto:[EMAIL PROTECTED]]
Sent: viernes 16 de agosto de 2002 13:17
To: Tomcat Users List
Subject: RE: Run Tomcat as tomcat user



Nearly...

The mysql user can be called anything you want.
I usually have a user set up in MySql specifically for Java called 
'javaUser'. I give them select, insert, delete and update privileges.

The UNIX mysql user is very separate than the mysql users. You shouldn't 
need to do anything with the UNIX mysql user. I believe this is used by 
mysql so it can the correct privileges to read and write the databases.
Users for mysql are so you can set up who is allowd to connect to the mysql 
and what they can do when they connect. ie. can they create databases, 
update databases, which databases they can update etc.


At 01:02 PM 16/08/2002 +0200, you wrote:

>Let me Understand,
>
>To run tomcat as tomcat user and be able to connect to mysql thought JDBC 
>I need:
>
>
>On my unix machine have a user named tomcat which runs tomcat.
>On mysql have other user named tomcat.
>And the connection thought JDBC must be done with the user and password 
>created in mysql.
>
>-Original Message-
>From: Capr1ce [mailto:[EMAIL PROTECTED]]
>Sent: viernes 16 de agosto de 2002 12:57
>To: Tomcat Users List
>Subject: RE: Run Tomcat as tomcat user
>
>
>
>No they don't need to have the same password.
>When your JSP/Java code connects to the MySql database using JDBC, you
>should use the mysql user to connect.
>
>
>At 12:48 PM 16/08/2002 +0200, you wrote:
> >¿the unix tomcat user and the mysql tomcat user must have the same password?
> >
> >-Original Message-
> >From: Capr1ce [mailto:[EMAIL PROTECTED]]
> >Sent: viernes 16 de agosto de 2002 12:40
> >To: Tomcat Users List
> >Subject: RE: Run Tomcat as tomcat user
> >
> >
> >
> >A password is not necessary, but certainly recommended.
> >
> >See these sections of the mysql documentation:
> >http://www.mysql.com/doc/en/GRANT.html
> >http://www.mysql.com/doc/en/Adding_users.html
> >
> >
> >At 12:31 PM 16/08/2002 +0200, you wrote:
> > >Hi Andy !
> > >
> > >Thanks for your response.
> > >
> > >I have created a user named tomcat in mysql and I have granted acccess
> > >but...I haven't created any password for this user, is necesary a 
> password??
> > >
> > >Urtzi
> > >
> > >-Original Message-
> > >From: Andy Eastham [mailto:[EMAIL PROTECTED]]
> > >Sent: viernes 16 de agosto de 2002 12:25
> > >To: Tomcat Users List
> > >Subject: RE: Run Tomcat as tomcat user
> > >
> > >
> > >Urtzi,
> > >
> > >You need to grant access to the tomcat user.  See the section in the GRANT
> > >command in the mysql manual (available online at the www.mysql.com site).
> > >By default, root can connect without a password, but other users need 
> to be
> > >granted access.
> > >
> > >You'll need to execute something like:
> > >GRANT ALL PRIVILEGES on *.* to nobody@yourhostname identified by
> > >'nobodyspassword';
> > >
> > >The password is not the unix password - its mysql specific and set by this
> > >command.
> > >
> > >I recommend you read up to make sure you're only grant what you need - 
> after
> > >all there's no point running as nobody if it can do everything root can...
> > >
> > >Test it by doing
> > >su - nobody
> > >then check that you can connect with the password you've set.
> > >
> > >Andy
> > >
> > > > -Original Message-
> > > > From: Urtzi Larrazabal [mailto:[EMAIL PROTECTED]]
> > > > Sent: 16 August 2002 11:04
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Run Tomcat as tomcat user
> > > >
> > > >
> > > >
> > > > Hi !
> > > >
> > > > I am trying to run tomcat as tomcat user. When I start it, it
> > > > seems to start without any problem. I execute some jsp and it
> > > > works fine but when I execute a page tha require to connect to
> > > > mysql database it cant't connect to the database and an empty log
> > > > named something 

Restricting Access to Web Resources

[Urtzi Larrazabal]

Hi friends,

I am trying to protect my application with an authentification but I don't know why my 
security constraint is ignored. When I access to the application I'm not prompted for 
a user and a password. Does anyone know what am I doing wrong?


#cd webapps/Myaplicaion/WEB-INF
#more web.xml


http://java.sun.com/j2ee/dtds/web-app_2_2.dtd";>







Restricted Area

/Myaplication/*


tomcat





BASIC
My Secure Test Area
    




regards,

Urtzi Larrazabal

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

run as tomcat user

[Urtzi Larrazabal]

Hi friends !

I have installed Tomcat 3.3 on a Solaris 8 and I would like to know what sould I do to 
run as Tomcat user. If I run as root all works well but if I run as another user it 
doesn't work.
Does anyone know the permisions that I must apply?

Regards,

Urtzi Larrazabal

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

RE: Restricting Access to Web Resources

[Urtzi Larrazabal]

ohh!! you are right !

But now, when I try to access to my aplication I am prompted for a user and a 
password,and if I introduce tomcat user and tomcat password I can't access. Where must 
be defined the users with access permisions, I mean where must I especify the 
tomcat ??
In the directory /conf/users there are some files:admin-users.xmlexample-users.xml 
 global-users.xml   tomcat-users.xml


thanks a lot !

-Original Message-
From: John Burgess [mailto:[EMAIL PROTECTED]]
Sent: jueves 6 de junio de 2002 14:54
To: Tomcat Users List
Subject: RE: Restricting Access to Web Resources


I believe the URL you want is /* 
i.e. the /MyApp is assumed since you are defining the constraint in the
MyApp context

Best Wishes
John Burgess
[EMAIL PROTECTED]
Tel: 01865 718666 
Fax: 01865 718600


-Original Message-
From: Urtzi Larrazabal [mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 06, 2002 10:01 AM
To: 'Tomcat Users List'
Subject: Restricting Access to Web Resources




Hi friends,

I am trying to protect my application with an authentification but I don't
know why my security constraint is ignored. When I access to the application
I'm not prompted for a user and a password. Does anyone know what am I doing
wrong?


#cd webapps/Myaplicaion/WEB-INF
#more web.xml


http://java.sun.com/j2ee/dtds/web-app_2_2.dtd";>







Restricted Area

/Myaplication/*


tomcat





BASIC
My Secure Test Area
    




regards,

Urtzi Larrazabal

--
To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.365 / Virus Database: 202 - Release Date: 24/05/02
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.365 / Virus Database: 202 - Release Date: 24/05/02
 

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Tomcat 3.3 and LDAP

[Urtzi Larrazabal]

I would like to know if Tomcat 3.3 has the JNDIRealm feature to authentificate users 
with LDAP.


--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

secure aplications with JDBCRealm

[Urtzi Larrazabal]

Hi !

I am trying to secure my application thought JDBCRealm



# 2002-06-07 12:24:05 - Ctx(/Myaplication) : Exception in R( /Myaplication +  + null) 
- java.lang.RuntimeException: JDBCRealm.checkConnection: 
java.lang.ClassNotFoundException: org.gjt.mm.mysql.Driver
at org.apache.tomcat.modules.aaa.JDBCRealm.checkConnection(JDBCRealm.java:307)
at org.apache.tomcat.modules.aaa.JDBCRealm.getCredentials(JDBCRealm.java:239)
at org.apache.tomcat.modules.aaa.RealmBase.checkPassword(RealmBase.java:212)
at org.apache.tomcat.modules.aaa.RealmBase.authenticate(RealmBase.java:193)
at org.apache.tomcat.core.Request.getRemoteUser(Request.java:575)
at 
org.apache.tomcat.modules.aaa.AccessInterceptor.authorize(AccessInterceptor.java:359)
at 
org.apache.tomcat.core.ContextManager.internalService(ContextManager.java:902)
at org.apache.tomcat.core.ContextManager.service(ContextManager.java:833)
at 
org.apache.tomcat.modules.server.Ajp13Interceptor.processConnection(Ajp13Interceptor.java:341)
at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:494)
at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:516)
at java.lang.Thread.run(Thread.java:479)



server.xml




--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

RE:access to secure aplications with JDBCRealm authentification

[Urtzi Larrazabal]

> Hi ! 
> 
> I am trying to secure my application thought JDBCRealm
> 
> When I access to my application and after introducing the required user and password 
>I have the following error.
> 
> # 2002-06-07 12:24:05 - Ctx(/Myaplication) : Exception in R( /Myaplication +  + 
>null) - java.lang.RuntimeException: JDBCRealm.checkConnection: 
>java.lang.ClassNotFoundException: org.gjt.mm.mysql.Driver
> at 
>org.apache.tomcat.modules.aaa.JDBCRealm.checkConnection(JDBCRealm.java:307)
> at org.apache.tomcat.modules.aaa.JDBCRealm.getCredentials(JDBCRealm.java:239)
> at org.apache.tomcat.modules.aaa.RealmBase.checkPassword(RealmBase.java:212)
> at org.apache.tomcat.modules.aaa.RealmBase.authenticate(RealmBase.java:193)
> at org.apache.tomcat.core.Request.getRemoteUser(Request.java:575)
> at 
>org.apache.tomcat.modules.aaa.AccessInterceptor.authorize(AccessInterceptor.java:359)
> at 
>org.apache.tomcat.core.ContextManager.internalService(ContextManager.java:902)
> at org.apache.tomcat.core.ContextManager.service(ContextManager.java:833)
> at 
>org.apache.tomcat.modules.server.Ajp13Interceptor.processConnection(Ajp13Interceptor.java:341)
> at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:494)
> at 
>org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:516)
> at java.lang.Thread.run(Thread.java:479)
> 
> 
> where should be the org.gjt.mm.mysql.Driver driver?
> and where is especified the location of the driver?
> 
> 
> 
> server.xml
> 
>  debug="99"
> driverName="org.gjt.mm.mysql.Driver"
> connectionURL="jdbc:mysql://myhost.dec.es/tomcat"
> userTable="user"
> userNameCol="user_name"
> userCredCol="user_pass"
> userRoleTable="user_roles"
> roleNameCol="role_name" />
> 

--
To unsubscribe, e-mail:   
For additional commands, e-mail: